Ransomware Spotlight: RansomEXX - Security News
Tags
cmtmf-attack-pattern: Command-Line Interface System Network Connections Discovery
country: Brazil France Taiwan
maec-delivery-vectors: Watering Hole
attack-pattern: Data Command-Line Interface - T1605 Credentials - T1589.001 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Disable Or Modify Tools - T1562.001 Disable Or Modify Tools - T1629.003 Exploits - T1587.004 Exploits - T1588.005 File And Directory Discovery - T1420 Hardware - T1592.001 Impair Defenses - T1562 Impair Defenses - T1629 Inhibit System Recovery - T1490 System Network Connections Discovery - T1421 Malware - T1587.001 Malware - T1588.001 System Information Discovery - T1426 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Service Stop - T1489 Sharepoint - T1213.002 Software - T1592.002 Windows Command Shell - T1059.003 Vulnerabilities - T1588.006 Command-Line Interface - T1059 Deobfuscate/Decode Files Or Information - T1140 File And Directory Discovery - T1083 System Information Discovery - T1082 System Network Connections Discovery - T1049 Valid Accounts - T1078 Command-Line Interface Service Stop Valid Accounts
Show in Graph
Common Information
Type Value
UUID 62785e98-b460-405b-b0e3-b67de4141ff5
Fingerprint 93f52858e7c1af03
Analysis status DONE
Considered CTI value 2
Text language
Published May 17, 2022, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Ransomware Spotlight: RansomEXX
Title Ransomware Spotlight: RansomEXX - Security News
Detected Hints/Tags/Attributes 106/4/21
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-ransomexx
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details Domain 38 
ntdetect.com
Details File 351 
recycle.bin
Details File 99 
bootsect.bak
Details File 101 
iconcache.db
Details File 143 
thumbs.db
Details File 17 
debug.txt
Details File 120 
boot.ini
Details File 196 
desktop.ini
Details File 243 
autorun.inf
Details File 193 
ntuser.dat
Details File 90 
bootfont.bin
Details MITRE ATT&CK Techniques 306 
T1078
Details MITRE ATT&CK Techniques 333 
T1059.003
Details MITRE ATT&CK Techniques 504 
T1140
Details MITRE ATT&CK Techniques 298 
T1562.001
Details MITRE ATT&CK Techniques 1006 
T1082
Details MITRE ATT&CK Techniques 119 
T1049
Details MITRE ATT&CK Techniques 585 
T1083
Details MITRE ATT&CK Techniques 472 
T1486
Details MITRE ATT&CK Techniques 197 
T1489
Details MITRE ATT&CK Techniques 276 
T1490